Network Security Evaluation provides a methodology for conducting technical security evaluations of all the critical components of a target network. The book describes how the methodology evolved and how to define the proper scope of an evaluation, including the consideration of legal issues that may arise during the evaluation. More detailed information is given in later chapters about the core technical processes that need to occur to ensure a comprehensive understanding of the networkas security posture. Ten baseline areas for evaluation are covered in detail. The tools and examples detailed within this book include both Freeware and Commercial tools that provide a detailed analysis of security vulnerabilities on the target network. The book ends with guidance on the creation of customer roadmaps to better security and recommendations on the format and delivery of the final report. * There is no other book currently on the market that covers the National Security Agency's recommended methodology for conducting technical security evaluations * The authors are well known in the industry for their work in developing and deploying network security evaluations using the NSA IEM * The authors also developed the NSA's training class on this methodologyThe evaluator should check to ensure that user rights assignments are being granted based on organizational roles. ... And the database administrator probably shouldna#39;t have the root password on the Solaris server (thata#39;s what sudo is for, as wea#39;ll see ... On UNIX/Linux/*BSD systems, the command sudo is the recommended method for granting limited access to privileged ... A very common example is that Service Pack 2 for Windows XP cannot be applied to some systems, becauseanbsp;...
|Title||:||Network Security Evaluation Using the NSA IEM|
|Author||:||Russ Rogers, Ed Fuller, Greg Miles, Bryan Cunningham|
|Publisher||:||Syngress - 2005-08-26|